openapi: 3.2.0
info:
  description: 'This API allows modification of Security for specific applications.


    The base endpoint URL for this API in production is: `https://marko.aramark.net/v1/security`.


    For testing the API with the "Try" tool on this page or in your app, use either our testing server "qa-marko" or our development server "dev-marko".'
  version: 1.0.0-oas3
  title: Security UAP API
servers:
- url: https://qa-marko.aramark.net/v1/security
  description: Testing server
- url: https://dev-marko.aramark.net/v1/security
  description: Development server
tags:
- name: UAP
  description: A collection of UAP Security endpoints
paths:
  /uap/role:
    post:
      summary: Add UAP Role
      description: Add a new UAP Role for a specific user
      operationId: postUAPRole
      tags:
      - UAP
      requestBody:
        description: Details for the UAP Role being added
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postUapRoleBody'
      responses:
        '200':
          description: Status of the Request
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    description: ENUM 'Success', 'Error' or 'Not Found'
                  message:
                    type: string
                    description: Status Message for the Request
        '404':
          description: Requested resource does not exist.
        '405':
          description: HTTP Verb / Operation not supported
    delete:
      summary: Remove UAP Role
      description: Remove a UAP Role for a specific user
      operationId: deleteUAPRole
      tags:
      - UAP
      requestBody:
        description: Details for the UAP Role being removed
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postUapRoleBody'
      responses:
        '200':
          description: Status of the Request
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    description: ENUM 'Success', 'Error' or 'Not Found'
                  message:
                    type: string
                    description: Status Message for the Request
        '404':
          description: Requested resource does not exist.
        '405':
          description: HTTP Verb / Operation not supported
components:
  schemas:
    postUapRoleBody:
      type: object
      properties:
        app_name:
          type: string
          description: Name of the Application
        user_acct:
          type: string
          description: Email address for the user
        org_code:
          type: string
          description: Aramark Organization Value
        appr_acct:
          type: string
          description: Email address for the approver
        role_name:
          type: string
          description: Name of the Role user is being granted access from
  securitySchemes:
    apikey:
      type: apiKey
      in: header
      name: apikey
      description: This HTTP Header variable will verify security